Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa
File:                     34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa (raw, json)
Hash identifier:          PyIqVkh/cE2D9KefDw94Qc4q42FAk+H1DLqs+4n8dE4=
Subject key identifier:   6D:70:EB:9D:B7:8A:8C:9E:10:C6:8F:48:53:9B:E2:EF:31:E0:0B:0E
Certificate issuer:       /CN=944D7F16EF33CF24B63038B95B06199620AA80DB
Certificate serial:       09821496123E66EE12B056E8671FE29FF0A865BD
Authority key identifier: 94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa
Signing time:             Sat 25 Oct 2025 01:39:13 +0000
ROA not before:           Sat 25 Oct 2025 01:34:13 +0000
ROA not after:            Sat 24 Oct 2026 01:39:13 +0000
asID:                     268166
IP address blocks:        45.170.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl
                          rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:14:96:12:3e:66:ee:12:b0:56:e8:67:1f:e2:9f:f0:a8:65:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D7F16EF33CF24B63038B95B06199620AA80DB
        Validity
            Not Before: Oct 25 01:34:13 2025 GMT
            Not After : Oct 24 01:39:13 2026 GMT
        Subject: CN=6D70EB9DB78A8C9E10C68F48539BE2EF31E00B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:73:3d:e1:7c:90:78:f5:da:8b:f5:ba:30:
                    7c:02:4a:22:01:f2:00:a8:8a:98:dc:1e:35:45:e9:
                    a8:ec:e6:16:fc:36:f3:36:79:00:ba:fe:d1:45:84:
                    74:f9:d0:ef:dd:9a:2b:d3:6d:10:20:93:c7:f7:3e:
                    d0:98:0d:66:87:11:15:41:85:2e:f0:8f:5c:ba:70:
                    86:63:11:2e:69:f2:27:4e:ac:2e:84:3d:c2:82:db:
                    35:f6:af:c8:6f:7d:88:af:5a:91:59:21:58:58:d0:
                    b5:10:9b:bd:76:e4:3d:f6:78:ae:0c:b1:d9:05:d8:
                    ca:85:7c:25:31:3f:a5:ab:f1:bb:b4:48:80:99:66:
                    c7:01:0f:d6:63:81:87:16:55:9a:59:b5:70:a0:79:
                    09:32:f0:cf:68:bc:2e:d2:3e:70:6b:ad:71:f2:be:
                    95:49:cd:64:8a:83:91:db:a1:64:65:6c:88:35:d0:
                    22:9c:e4:cd:10:39:7f:5f:65:ef:25:7c:1d:19:79:
                    3c:fb:b2:4c:47:54:6a:0b:88:eb:66:4b:e8:de:72:
                    3a:71:cc:c4:8b:34:87:50:a1:44:ba:d2:80:3e:a6:
                    03:bd:53:48:b6:45:a3:96:0d:12:e6:ef:be:33:f9:
                    7e:3f:4c:4e:b5:20:ea:8b:49:5d:ed:2f:6b:37:20:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:EB:9D:B7:8A:8C:9E:10:C6:8F:48:53:9B:E2:EF:31:E0:0B:0E
            X509v3 Authority Key Identifier:
                keyid:94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:c6:85:28:4e:7e:e3:2f:5a:04:8e:eb:3b:d1:3d:ba:a7:
         d4:41:6c:79:c6:86:2d:9c:4b:70:a2:1e:97:35:4a:c8:68:cd:
         33:98:7a:68:51:e8:cd:d9:b0:74:a0:28:e0:66:46:b3:1d:c0:
         a3:a8:e6:c7:93:94:d5:3e:46:72:04:9a:73:46:8e:5b:81:c1:
         75:f5:cd:8f:e0:81:e0:35:9a:1f:72:6e:84:42:58:1a:51:f5:
         50:73:a2:89:83:c1:40:fb:ed:12:44:01:92:a0:c1:06:1d:72:
         f8:f7:16:6b:ef:29:53:1a:03:6a:60:28:c2:91:08:fe:c7:90:
         a8:33:bc:c3:79:07:e7:a7:61:e4:a2:5a:9b:e2:7b:f1:87:ad:
         af:04:ec:ce:7b:33:60:a1:79:ca:5e:47:d2:bc:eb:77:75:ec:
         ff:2f:3e:08:0e:55:13:02:3b:03:53:9b:7e:4c:29:92:4a:7f:
         33:2a:18:94:fd:98:a1:32:b9:bd:60:0b:fb:30:dd:cc:b7:23:
         f6:67:f0:d6:d7:69:1a:c9:38:ca:3a:1e:69:70:5c:46:eb:10:
         cc:de:06:a9:f3:40:be:0b:ac:0b:78:42:41:e5:d6:0c:81:2b:
         ee:64:52:63:04:a0:61:cd:38:68:67:1a:e0:c0:53:14:2b:53:
         2c:7c:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:31 2025 by rpki-client